Your privacy matters at SlateArt

1. Who we are

SlateArt is the controller of the personal data described in this Privacy Policy where we decide how and why your personal data is processed.

2. Personal data we collect

Depending on how you use our website and services, we may collect the following categories of personal data:

Information you provide directly

• Name, email address, phone number and postal address.
• Order details, including product choices, uploaded images, personalization details and delivery information.
• Messages you send through contact forms, email, chat, or other communications.
• Account or affiliate information if you register for services available through our website.

Information collected automatically

• IP address, browser type, device information and approximate location derived from technical data.
• Pages visited, referring links, visit times and other website usage information.
• Cookie and similar technology data where used on the website.

Payment information

Payments may be processed through third-party providers. We generally do not store full payment card details on our own systems.

3. How we use your personal data

We use personal data to:

• Process and deliver orders.
• Provide customer support and respond to enquiries.
• Review uploaded files and personalization requests needed to create your order.
• Manage affiliate, user or administrative functions where relevant.
• Improve website functionality, security and performance.
• Maintain business records, prevent misuse and protect our services.
• Comply with tax, accounting and legal obligations.
• Send service-related messages and, where permitted, marketing communications.

4. Legal bases for processing

Under GDPR, organisations must have a valid legal basis for processing personal data. Depending on the activity, SlateArt may rely on one or more of the following:

• Contract: where processing is necessary to take steps at your request or perform a contract, such as processing and delivering an order.
• Legal obligation: where we must keep records or comply with tax, accounting or regulatory requirements.
• Legitimate interests: where necessary for website security, service improvement, fraud prevention, internal administration and responding to non-order enquiries, provided your rights do not override those interests.
• Consent: where required, for example for certain cookies or optional marketing communications.

5. Cookies and analytics

We may use cookies and similar technologies to keep the website working, remember preferences, measure traffic and improve user experience. Some cookies may be strictly necessary, while others may require consent depending on how they are used.

For more information, please see our Cookie Policy.

6. When we share personal data

We may share personal data only where necessary, including with:

• Delivery, hosting, technical support and website service providers.
• Payment providers and transaction service providers.
• Email and communication providers.
• Professional advisers, where needed for legal, tax or compliance purposes.
• Public authorities or regulators where required by law.

Service providers process data on our behalf where applicable and are expected to handle personal data securely and lawfully.

7. How long we keep your data

We keep personal data only for as long as necessary for the purposes described in this Privacy Policy, including to fulfil orders, respond to enquiries, maintain records, resolve disputes and comply with legal obligations.

• Order and accounting data may be retained for legal and tax recordkeeping periods.
• Customer service communications may be kept for a reasonable period to manage support and follow-up.
• Technical logs and visitor data may be kept for security, analytics and administration for a limited period appropriate to those purposes.

8. Data security

We take appropriate technical and organisational measures designed to protect personal data against unauthorised access, disclosure, alteration or loss. However, no website or electronic storage system can be guaranteed to be completely secure.

9. Your data protection rights

Subject to applicable law, you may have the right to:

• Request access to your personal data.
• Request correction of inaccurate or incomplete data.
• Request deletion of your personal data in certain circumstances.
• Request restriction of processing in certain circumstances.
• Object to processing based on legitimate interests.
• Request data portability where applicable.
• Withdraw consent where processing is based on consent.
• Lodge a complaint with a supervisory authority.

To exercise your rights, please contact us using the details below. We may need to verify your identity before responding to your request.

10. Children’s privacy

Our website and services are not intended for children unless used with appropriate parental or guardian involvement. We do not knowingly collect personal data from children in a manner prohibited by applicable law.

11. International data transfers

Some service providers may process data outside your country. Where personal data is transferred internationally, we aim to ensure appropriate safeguards are in place as required by applicable data protection law.

12. Changes to this Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our services, legal requirements or business practices. The updated version will be posted on this page with a revised effective date.

13. Contact us

If you have any questions about this Privacy Policy or how SlateArt handles personal data, please contact us: